docker-expert
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses various shell commands to inspect the host environment and validate Docker configurations. Evidence includes calls to
docker info,docker context ls,find,docker ps,docker build, anddocker runfor discovery and validation purposes. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon the contents of untrusted local files, creating a potential vector for instructions embedded in data to influence the agent's behavior. Ingestion points: Project files identified by
find . -name "Dockerfile*"andfind . -name "*compose*.yml". Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present when the agent processes these files. Capability inventory: The agent has the ability to executedocker build,docker run, anddocker execbased on the content of these files. Sanitization: No sanitization or validation of the content of the Dockerfiles or Compose files is performed before processing.
Audit Metadata